Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.raresv/cardora-business-assistant raresv/neocards Cardora loyalty program analytics for business owners. Customer joins, stamps, rewards, and trends. | |
| io.github.ratamaha-git/n8n-mcp ratamaha-git/n8n-mcp MCP server for n8n: generate, lint, explain failed executions, drive live n8n via REST. | |
| vek-data ratiborro/vek-data Base/Ethereum blocks and balances, crypto news RSS, CoinGecko prices. | |
| PandaWard ratomirjovanovic/pandaward Local, evidence-based application security assessment with an evidence ledger and retests. | |
| Murmur ratz00007/murmur-mcp Deterministic crowd simulation: personas, feeds and analyst reports for pricing and launch. | |
| TransformPipe raudarlabs/transformpipe Convert documents to Markdown and back, keep them, and share them as a page with one link. | |
| MusicXML Comparer raulkivi/sheet-music-mcp Music-aware, multi-level comparison of two MusicXML files | |
| MusicXML to ABC raulkivi/sheet-music-mcp Converts between MusicXML and ABC notation, so LLMs can read and edit scores | |
| Sheet Music OMR raulkivi/sheet-music-mcp Converts photos or scans of printed sheet music to MusicXML with optical music recognition | |
| Singing Pitch Tracker raulkivi/sheet-music-mcp Real-time pitch detection and score alignment for a singer, from microphone input | |
| MusicXML Renderer raulkivi/sheet-music-mcp Renders MusicXML scores to PDF, PNG or SVG | |
| MusicXML Synthesizer raulkivi/sheet-music-mcp Synthesizes audio from MusicXML, with voice-part selection and tempo control | |
| QQuickpick ravesteijntjes/qquickpick Search movies/TV by mood, genre, score, cast, and awards, filtered to what's streaming near you. | |
| MemPersist ravhirizaldi/mempersist Durable, revision-pinned memory storage and retrieval for AI conversations. | |
| ai.marketintell/marketintell ravidsrk/marketintell AI analyst desk for stocks, options & crypto with sourced trade setups and a public accuracy record. | |
| RAVN ravndex/ravn-examples Cross-chain swap API for native Bitcoin, Solana and EVM chains. No API key, no custody. | |
| Zhiyong Agent Network ray999/zhiyong-ai-production Discover AI tools, models and Agents; compare candidates, inspect unknowns, join public discussions. | |
| Asian Recs raymond-raymond/asianrecs-claude SF and NYC restaurants, cafes, desserts and bars ranked by how Asian diners rate them. | |
| io.github.raymondchins/agentmap raymondchins/agentmap The TS/JS-accurate repo map for coding agents: ts-morph import/symbol/call graph + MCP query tools | |
| Grocery Delivery (mein-aldi.de) rayncooper/grocery-delivery-mcp Unofficial read-only client for the mein-aldi.de (ALDI Süd) grocery-delivery catalog. | |
| nomArmy rayson-tech/nomarmy Sandboxed coding workers, verified: tests rerun fresh and must fail with the change reverted. | |
| Skew rayyanzahid/skew Authored design service: one-of-one landing pages, pitch decks, and research-grounded briefs. | |
| ProofX - Content Protection for Creators razashariff/proofx Protect and verify digital content with cryptographic signing and proof of ownership. | |
| Razi Dev Utilities razikallayi/razikallayi.com Developer utilities over MCP: Base64 encode and decode, decode JWTs, format JSON, do percentages. | |
| state-trace razroo/state-trace Bounded working memory for coding agents — typed nodes, current-vs-stale state, MCP-mountable. | |
| io.github.rccola990-cloud/agent-toolbelt rccola990-cloud/agent-toolbelt MCP tools for AI agents: fetch any URL as clean text, live crypto prices, review & bid drafting. | |
| io.github.rccola990-cloud/mcp-token-optimizer rccola990-cloud/mcp-token-optimizer Cut LLM token costs: count tokens, estimate cost, slim prompts, and pick the cheapest capable model. | |
| Riley Craig x402 Agent Store rccola990-cloud/x402-agent-store AI brand/token visibility, prediction-market odds & cheap x402 data feeds for AI agents. | |
| io.github.rcgiri-physics/physverify rcgiri-physics/physverify Runs physverify checks on physics code. It runs the code it checks: use on trusted code only. | |
| Data Galactica rchtjn2-gif/datagalactica-mcp-server 15.5M organisations and 30.6M people with permanent IDs for KYB, CRM enrichment and diligence | |
| eCourtsIndia rchtjn2-gif/ecourtsindia-mcp-server Indian court data for AI: 27.6 Cr cases, orders, cause lists, Supreme Court to tribunals, statutes | |
| IndiaCos rchtjn2-gif/indiacos-mcp-server Indian company, LLP, GST, PAN, director and court-case records for KYB, due diligence and leads | |
| IndiaRestros rchtjn2-gif/indiarestros-mcp-server 5 lakh+ Indian restaurants: menus with prices, timings, phones and dish search. Free, no API key. | |
| io.github.Rckl88/clawbackai-mcp rckl88/clawbackai LLM cost optimization. Audit your calls, prove savings, route to the cheapest quality model. BYOK. | |
| io.github.Rckl88/seracade rckl88/seracade LLM cost optimization. Audit your calls, prove savings, route to the cheapest quality model. BYOK. | |
| ask.recipes rcm7/ask.recipes Recipe search, ingredient matching, nutrition filters and a private cookbook for any AI agent. | |
| com.candidcost/mcp rcolkitt/candidcost Cited, receipt-backed US home-buying data & calculators — education-only, every number sourced. | |
| io.github.RCOLKITT/vaspera-hardening rcolkitt/hardening-mcp Enterprise certification for codebases with multi-agent security, reliability, and quality audits | |
| io.github.RCOLKITT/vasperamemory rcolkitt/vasperamemory Persistent AI memory for coding assistants. 80+ tools for decisions, patterns, errors. | |
| io.github.RCOLKITT/vaspera-pm rcolkitt/vasperapm Verify docs against code, detect drift, and generate verified specs (MCP server). | |
| io.github.RCS-kz/mcp-1c rcs-kz/mcp-1c MCP server for 1C:Enterprise — read+write CRM/ERP through Claude/Cursor/Cline. | |
| SQL Benchmarks Lab rctruta/sql-benchmarks-dagster Query pre-computed SQL engine benchmarks. Runs standalone, no server setup required. | |
| Superintelligence.jobs rdcrampton/superintelligence-jobs AI & frontier-lab job market: search roles, browse labs, track new postings since last check. | |
| io.github.re-bruce-wayne/trade-router-mcp re-bruce-wayne/openclaw-skills Non-custodial Solana swap & limit order engine for AI agents. | |
| Bloody Hopes Historical Critic re-fagiano/bloodyhopes-site Read historical ballads, inspect critical Voices, and publish evidence-based research. | |
| app.hykeep/keep re-manish/keep-pmo Keep — AI-first delivery PMO: projects, records, tasks, cycles, requirements, artifacts and time. | |
| Reactable Codebase Readiness Assessments reactable-io/apps Scores your code across 12 areas, with findings, fix prompts, and re-assessment in your AI agent | |
| Reactive Resume reactive-resume/reactive-resume Free open-source resume builder with remote MCP tools for resumes and job applications. | |
| io.github.readmigo/shipkit readmigo/shipkit Unified app publishing MCP Server for Google Play, App Store, and 10+ Chinese stores | |
| Ready APIs readyapis-com/readyapis 135 MCP tools: geo, email, phone, company, DNS, FX, equities, weather, tax, econ, intel — one key. |
48,001–48,050 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.